SALSA Conference Call
18 November 2004
----------------------------------------------
Table of Contents
*Action Items*
1. Updates: spyware/botnets call; federated wireless netauth call
2. Meetings
3. Continuing items
*Attendees*
----------------------------------------------
*Action Items*
[AI] {Chris C./Charles} will meet and provide SALSA with a more detailed update on the spyware/botnets
call.
[AI] {Kevin} will forward the Federated Wireless NetAuth roadmap to the list. (Done)
[AI] {Mark} will send an update on the IETF meeting to the list.
[AI] {Rodney} will speak with Jack Suess re: his email to Mark about 'secure communications' approaches
for 2Q2005 HIPAA.
----------------------------------------------
1. Updates: spyware/botnets call; federated wireless netauth call
The spyware/botnets call went fairly well. Charles sent notes to everyone on the call, and there are
some action items that Chris C. will be working on. Chris will also meet with Charles in order to provide
SALSA with a more detailed update.
The Federated Wireless NetAuth call also went well. The group is looking to run in two separate phases.
The first phase of deployment is designed so that it can be rapidly executed; the second phase is
intended to more completely address the topic of federated network authentication. Kevin will forward
a draft version of the group's roadmap to the list.
There was also a discussion about what role SALSA should have in reviewing netflow data, as well as the
role SALSA might have in reviewing how Abilene responds (related to DDoS attacks). The original SALSA
discussion (which took place during an earlier call) was related to the Abilene Observatory, the data
available through the observatory, and guidance that might be provided to help the observatory interact
with researchers about that data. Now there may be some other effort afoot to make more data (unanonymized)
available. Ken stated that initially, one of the two CyberTrust awardees made a request to Abilene to
get unanonymized flow data. The question that it comes down to is whether the policies of Abilene should
be the same as campuses, and if so do we have policies that we can use as the basis for Abilene flows?
SALSA might try to integrate Marty's intent with the netflow doc and try to present a range of approaches
(e.g., from MIT's approach of not collecting to what might be at the other end of the perspective).
----------------------------------------------
2. Meetings
Reports: Mark will send an update on the IETF meeting to the list. Since Charles wasn't able to
participate on today's call, his SC2004 report has been deferred.
Upcoming Meetings: The CFP for the Spring I2 MM (May 2-4) will be going out soon and one major area is
security. SALSA needs to think about topics on which we could submit proposals. The NetAuth group will
submit a proposal, and Chris is planning to solicit a proposal from Kevin on the wireless 802.1x work
or one of the other papers. We will try to determine (soon) whether the Spring SALSA meeting will take
place after the Monday evening reception again.
The Security Professionals Workshop (April 3-5) CFP closes on 22 November (30 proposals have been
received to date). The committee is hoping to make this conference more technical and less managerial,
so this year there will be 2 tracks devoted to technology - baseline and advanced. Topics discussed by
this group might be appropriate for the advanced track and SALSA members are invited to submit a proposal.
The committee may also approach this group about crafting a specific session once the CFP closes if any
gaps are found in the program.
----------------------------------------------
3. Continuing items
The email from Jack Suess about 'secure communications' approaches for 2Q2005 HIPAA, is a leftover item
from the previous call. Rodney will speak with Jack about this topic and keep this group updated. However,
since there was minimal interest in this among SALSA members, this discussion thread will not continue
through these calls.
The Security 'futures' item was deferred due to time constraints.
----------------------------------------------
*Attendees*
Cramer, Chris
DiFatta, Chas
Dobbins, Gary
Gray, Terry
Kassabian, Deke
Klingenstein, Ken
Miller, Kevin
Misra, Chris
Pearson, Doug
Petersen, Rodney
Poepping, Mark
Schiller, Jeff
St. Sauver, Joe
Travis, Greg
Vogel, Valerie
----------------------------------------------
[End of minutes for 18 November 2004.]